Input validation error in Sun GlassFish Enterprise Server - CVE-2011-3564
Published: January 19, 2012 / Updated: August 11, 2020
Vulnerability identifier: #VU44401
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-3564
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
Unspecified vulnerability in Oracle GlassFish Enterprise Server 2.1.1 allows local users to affect confidentiality via unknown vectors related to Administration.
Affected software
Sun GlassFish Enterprise Server
How to mitigate CVE-2011-3564
Install update from vendor's website.